If JamesD is reading this, and consider this as default option for users (disable the checkbox to remember certificate by default), just include the above in your "defaults\profile\prefs.js" file for the releases you are making